How Bulletproof Trust Helped Remove High-Risk Open-Source Software from a Defense Agency

Discover how a cybersecurity analyst used Bulletproof Trust to assess the software supply chain risk of Harbor, an open-source container registry being considered for use within a defense agency. This case study highlights how the platform consolidated vulnerability, dependency, contributor and software assurance data into verifiable evidence, replacing days of manual research.

The analysis identified four high-risk findings tied to a single library, providing management with the evidence needed to approve Harbor’s removal and block future deployment.

Key topics include:

• Assessing software supply chain risk
• Evaluating open-source software
• Consolidating cybersecurity research
• Vulnerability and dependency analysis
• Contributor and software assurance data
• Identifying high-risk findings
• Supporting secure technology decisions

Download this case study to learn how Bulletproof Trust can help organizations make informed software supply chain decisions.